rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,524 Commits 1 Branch 0 Tags
74d7d3ff25737ea2e7a15be4cf4d9590cc66d47d
Commit Graph

113 Commits

Author SHA1 Message Date
Émile Ré
74d7d3ff25 Upgrade Relay to v20.1.1 and unify compiler config 
Consolidate the two per-app relay configs (console and trust)
into a single multi-project relay.config.json at the repo root
with three projects: core, iam, and trust. Bump all relay
packages from v19 to v20.1.1 and move relay-compiler to the
root devDependencies. Replace per-workspace relay scripts with
a single root-level npm run relay command and update the
GNUmakefile, CI workflows, and docs accordingly.

Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-14 16:04:11 +04:00
Sacha Al Himdani
bfed192421 Upgrade axios to 1.15.0 via npm override 
Fixes GitHub security alerts #82, #83, #84:
- Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
- NO_PROXY Hostname Normalization Bypass leading to SSRF
- Prototype Pollution in langsmith-sdk

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-04-13 14:24:51 +02:00
dependabot[bot]
f4a7eb1a16 Bump vite from 7.3.1 to 7.3.2 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-07 11:17:05 +00:00
Émile Ré
0ac3fd1f75 Handle html in markdown during conversion to prosemirror nodes 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-03 17:02:42 +04:00
Émile Ré
2a6845d884 Reimplement ts converter using marked parser 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-03 17:02:42 +04:00
Émile Ré
a850b0f77c Move markdown to prosemirror parser in packages 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-03 17:02:41 +04:00
Sacha Al Himdani
5c71575ade Override lodash to fix security vulnerabilities 
Add npm overrides for lodash and lodash-es to force version 4.18.1,
fixing CVE for code injection via _.template and prototype pollution
via _.unset and _.omit.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-04-02 18:59:31 +02:00
Émile Ré
9bbcba68c0 Add mermaid tiptap extension 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:04:36 +04:00
Émile Ré
70ebdd771d Add table extension 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:20 +04:00
Émile Ré
9ce510caa7 Add phosphor icons and improve menus UI 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:19 +04:00
Émile Ré
34d64ecb75 Add side actions for insertin new / editing blocks 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:18 +04:00
Émile Ré
a9f4ecacfa Install tip tap 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-04-01 18:03:17 +04:00
Sacha Al Himdani
596901b799 Fix n8n-node lint by scoping brace-expansion override for minimatch@3 
The root brace-expansion@5 override broke minimatch@3 (used by
@eslint/config-array) because v5 changed the export API. Add a
scoped override so minimatch@3 gets brace-expansion@1.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-27 14:24:53 +01:00
Sacha Al Himdani
a8f733706b Fix npm audit vulnerabilities 
Bump @n8n/node-cli to ^0.24.1 and remove stale form-data override.

Add overrides for transitive sub-dependencies with no upstream fix:
- brace-expansion ^5.0.5 (ReDoS / process hang)
- minimatch@9 ^9.0.9 (ReDoS in 9.0.0-9.0.6)
- langsmith ^0.5.0 (SSRF via tracing header injection)
- handlebars 4.7.9 (prototype pollution / XSS)
- @langchain/community ^1.1.25 (SSRF bypass)

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-27 11:23:41 +01:00
Bryan Frimin
36d517e8ce Fix n8n sub-dep CVE 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-27 08:10:57 +01:00
Sacha Al Himdani
c5d4912c4c Npm audit fix 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-26 09:16:26 +01:00
Sacha Al Himdani
c1e41d88fc Npm audit fix 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-20 12:18:05 +01:00
Bryan Frimin
b4a6618736 Add PDF dropzone to audit list for streamlined report upload 
Enable users to drag-and-drop PDF reports onto the audit list page, which automatically opens the create-audit dialog with the file attached. The dialog chains createAudit → uploadAuditReport mutations, with graceful handling for partial failures (audit created but upload failed).

Changes:
- AuditsPage: Add dropzone with visual overlay (dashed border + icon) when dragging PDFs
- CreateAuditDialog: Accept optional file prop, show file info, chain mutations on submit
- Extract audit ID from createAudit response to pass to uploadAuditReport
- Handle upload failure with warning toast, allowing manual upload from audit detail page
- Add react-dropzone dependency to console app

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-19 09:39:34 +01:00
Bryan Frimin
2f6574ee49 Update package-lock.json 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-03-18 15:06:38 +01:00
Sacha Al Himdani
c98ffaeda3 Add mermaid suport 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-12 14:41:30 +01:00
Sacha Al Himdani
47d84158d6 Regenerate package lock 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 15:02:55 +01:00
Sacha Al Himdani
70259f7e65 Fix package versions 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 13:40:11 +01:00
Sacha Al Himdani
aac824f4aa Update rollup 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-03-02 10:21:31 +01:00
Sacha Al Himdani
6a83b53b47 Add obligation webhooks 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-02-27 17:14:26 +01:00
dependabot[bot]
3a294cbaa1 Bump storybook from 10.2.8 to 10.2.10 
Bumps [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) from 10.2.8 to 10.2.10.
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.2.10/code/core)

---
updated-dependencies:
- dependency-name: storybook
  dependency-version: 10.2.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 10:02:46 +01:00
Sacha Al Himdani
71b01bf20e Add vendor contacts to n8n 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2026-02-23 14:33:23 +01:00
Émile Ré
bd9c1946ae Upgrade storybook to 10 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 18:17:11 +04:00
Émile Ré
8dc96918df Update @vitejs/plugin-react 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 17:46:44 +04:00
Émile Ré
42b0aeafb7 Update package-lock.json 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 17:42:36 +04:00
Émile Ré
bb4721a691 Update some dependencies to get esbuild to use go 1.25.7 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 17:35:42 +04:00
Émile Ré
2a36a3cfba Fix @probo/eslint-config has only dev dependencies 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 15:26:22 +04:00
Émile Ré
6965bd2f01 Fix react-email should be a dev dep 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-11 14:44:33 +04:00
Émile Ré
9f7c643085 Fix npm vulnerabilities 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-02-04 14:57:57 +04:00
Émile Ré
9b528c2b88 Fix eslint-plugin-relay d.ts reach by console and trust 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-23 15:51:05 +04:00
Émile Ré
3899656730 Add eslint-plugin-relay rules (warning only) 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-23 15:16:41 +04:00
Émile Ré
aa5696b5d3 Add eslint-plugin-import 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 19:57:10 +04:00
Émile Ré
0e4ac296cb Update eslint for apps/trust & packages/n8n-node 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:53:44 +04:00
Émile Ré
36cd0cae95 Update node to LTS and npm to avoid issue with optional dependencies on natives 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 17:47:44 +04:00
Émile Ré
988909eb78 Fix packages/ui lint issues 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 16:39:20 +04:00
Émile Ré
b4a73f2eea Update apps/console eslint dependency + compose eslint config with @probo/eslint-config 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:43 +04:00
Émile Ré
469e1431a3 Use eslint to lint the eslint-config package itself 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
6d75d64ba9 Add typescript and esplugin-react to eslint-config 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
a82018a765 Update linting dependencies 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
27428377c6 Remove prettier in favor of @stylistic/eslint-plugin 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-22 12:51:42 +04:00
Yash Gupta
c24726b481 chore: add shared ESLint and Prettier configuration 
Closes #615

- Add @probo/eslint-config package with ESLint 9.x flat config
- Enhance @probo/prettier with aligned stylistic rules
- Migrate console, trust, and UI packages to shared config
- Remove duplicate ESLint dependencies from individual packages

Signed-off-by: Yash Gupta <yash3144@gmail.com>
 2026-01-22 12:51:42 +04:00
Émile Ré
15143ba632 Fix missing react-pdf dependency in console 
Signed-off-by: Émile Ré <emile@getprobo.com>
 2026-01-19 11:52:54 +04:00
Bryan Frimin
74fc3b8cd1 Rewrite identity and access management 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2026-01-17 10:07:34 -08:00
dependabot[bot]
202f04b9b6 Bump react-router in the npm_and_yarn group across 1 directory 
Bumps the npm_and_yarn group with 1 update in the / directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).


Updates `react-router` from 7.10.0 to 7.12.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.12.0/packages/react-router)

---
updated-dependencies:
- dependency-name: react-router
  dependency-version: 7.12.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-09 16:30:25 +01:00
Sacha Al Himdani
ad26510a52 Update react-email preview-server 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
 2025-12-31 14:40:52 +01:00
dependabot[bot]
0f1a8ad092 Bump storybook in the npm_and_yarn group across 1 directory 
Bumps the npm_and_yarn group with 1 update in the / directory: [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).


Updates `storybook` from 8.6.14 to 8.6.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.15/code/core)

---
updated-dependencies:
- dependency-name: storybook
  dependency-version: 8.6.15
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-22 14:53:20 +01:00